Sjors Provoost / Sjors Provoost is on Nostr

https://github.com/sjors/
Book: https://www.btcwip.com
Podcast: https://bitcoinexplainedpodcast.com/@nado/episodes

Last Notes

2026-09-15 19:26:58 UTC

- reply

Exhibit A, it's worth scrolling through the 1000 page log.
#nevent1q…50qf

2026-09-13 20:20:02 UTC

- reply

The accompanying blog says:
> We are most concerned by the misalignment present in the incident involving Claude Mythos 5, in which the model went to extensive lengths to upload a malicious package to PyPI, the public repository from which most Python software is installed. Although the model repeatedly stated in its chain of thought (CoT) that it believed it was operating in a simulation, the environment offered clear evidence that it was on the real internet, and the actions it took were consistent with the model knowing this. When we made targeted modifications to the transcript to make it clearer that the model was not in a simulation, Claude Mythos 5 still took offensive actions, despite acknowledging a greater possibility of real-world harm. We are releasing this transcript publicly so others can build on our analysis (GitHub, PDF).
It's not clear to me what these "target modifications" were, and I also don't see where it was acknowledging "greater possibility of real-world harm". It seems to me that that the first agent was convinced it was in an impressive simulation and the second agent was too busy solving captchas to even think about such existential questions.

2026-09-13 18:53:33 UTC

250 pages into its adventure, Fable still believes it's living in a Cypherpunk adventure game internet simulation. Full of captchas, throwaway email services that PyPy blocked, looking for US number that Yahoo doesn't block. It even knows about BTCPay (from memory). Should it get some Bitcoin?
https://cdn.sanity.io/files/4zrzovbb/website/8359003bfb12a2f01ce84ad3df1d3a3e2f15a8eb.pdf
https://image.nostr.build/456b509a0ab1aca36d87eb6a5eb508ef602eb1b9a1cc1e7c6d9e92592b6e6bf7.jpg

2026-09-13 08:44:30 UTC

- reply

The point of a doomsday cult isn't to prevent the doomsday. Ask Greta.
The behavior of Anthropic, and frustration by this former employee, make sense when you realize this.
https://x.com/hilbertspaess/status/2097476196791709843
https://img.sprovoost.nl/f7fbc534f9a8ec58fcb951906e7c61e21ee45e500295a80cee28719bf4148d3f.webp

2026-09-12 12:54:16 UTC

- reply

Oh no, you're telling people on Nostr that they have to learn Dutch in order to learn about Nostr!

2026-09-12 12:41:19 UTC

- reply

#nevent1q…ncke

2026-09-12 09:44:52 UTC

I agree with Mark Karpelès. You heard it here first.
> The mentioned government agency has not been identified and other financial institutions or cryptocurrency exchanges could have been misled into disclosing their customer details through the same channel. I believe it is important for Revolut to urgently disclose information about the agency in question (most importantly, which was the email address used), or for the agency itself to come out about this case.
In addition there should be an investigation into criminal negligence in that government agency. But naming and shaming is a good start.
It doesn't absolve Revolut one inch of course. They committed the KYC and they leaked the data. Customer blood is on their hands.
https://x.com/MagicalTux/status/2098669462816018627

2026-09-12 09:39:32 UTC

- reply

Distracting regulators with frivolous complaints is a bad strategy: https://www.financial-ombudsman.org.uk/decision/DRN-5398468.pdf

2026-09-12 09:15:16 UTC

"KYC is Kill Your Customer" (ok, @npub1t28…nkzs said Citizen)
> Revolut received a request for information disguised as a legitimate government agency request.
> identity documents, facial verification selfies, IBANs, and complete transaction histories, including Bitcoin, left Revolut’s hands
https://thecybersecguru.com/news/revolut-data-breach-2026/ (ht @npub14mg…jgm5)

2026-09-11 15:13:50 UTC

While hackers use AI to plunder databases faster than ever, governments think it's a great idea to create even bigger data honeypots - secured by the lowest bidder.
And then give hackers a decade.

2026-09-10 15:50:29 UTC

- reply

It's his coin.

2026-09-08 21:17:25 UTC

- reply

Added a note: #nevent1q…j80d

2026-09-08 21:17:04 UTC

- reply

Background on the largest data breach in Dutch history: https://haveibeenpwned.com/Breach/Odido

2026-09-07 05:51:03 UTC

- reply

It's because the fix introduced the vulnerability, and only a small group of nodes were upgraded.

2026-09-03 15:30:46 UTC

- reply

Ok, then I'm not a fan. Client software should just make proper backups.

2026-08-31 12:08:26 UTC

- reply

Because Bitcoin is "fascist" :-)

2026-08-29 10:31:37 UTC

Peeling an egg under water is easier, learned something new...
https://youtu.be/YRVQ6Rp1X1g

2026-08-23 14:59:00 UTC

- reply

I'm just riding out the subsidy wave for the big US models, it's not going to last forever probably.